@wenrwa/marketplace-cli 0.8.7 → 0.8.9

package/dist/bridge/server.js

@@ -64,6 +64,7 @@ const sessionAnchor_1 = require("./sessionAnchor");
 const sessionTouchTracker_1 = require("./sessionTouchTracker");
 const attachmentWriter_1 = require("./attachmentWriter");
 const envSaver_1 = require("./envSaver");
+const envNames_1 = require("./envNames");
 const screenshotAttach_1 = require("./screenshotAttach");
 const paneClient_1 = require("./paneClient");
 const PROTOCOL_VERSION = 1;
@@ -232,10 +233,11 @@ function startBridgeServer(opts) {
         const method = LOCAL_ENDPOINTS[url.pathname];
         const localTreeMatch = url.pathname.match(/^\/local-tree\/([^/]+)$/);
         const localFileMatch = url.pathname.match(/^\/local-file\/([^/]+)$/);
+        const envNamesMatch = url.pathname.match(/^\/local-env-names\/([^/]+)$/);
         // Chrome Private-Network-Access: a public origin (app.hiveop.io) calling a
         // local address sends an OPTIONS preflight that MUST be answered with
         // Access-Control-Allow-Private-Network, or the browser blocks the call.
-        if (req.method === 'OPTIONS' && (method || localTreeMatch || localFileMatch)) {
+        if (req.method === 'OPTIONS' && (method || localTreeMatch || localFileMatch || envNamesMatch)) {
             if (req.headers.origin !== opts.allowedOrigin) {
                 res.writeHead(403).end();
                 return;
@@ -285,6 +287,41 @@ function startBridgeServer(opts) {
             });
             return;
         }
+        // tp-02 — GET /local-env-names/:workspaceId?token=… — the NAMES in the
+        // registered folder's `.env`, never a value (envNames.ts). Same
+        // origin+token gate as /local-tree (a GET can't carry the header).
+        if (envNamesMatch) {
+            if (req.method !== 'GET') {
+                res.writeHead(404).end();
+                return;
+            }
+            if (req.headers.origin !== opts.allowedOrigin) {
+                res.writeHead(403).end();
+                return;
+            }
+            if (url.searchParams.get('token') !== opts.sessionToken) {
+                res.writeHead(401, { 'access-control-allow-origin': opts.allowedOrigin }).end();
+                return;
+            }
+            let root = null;
+            try {
+                root = opts.resolveEnvNamesRoot ? opts.resolveEnvNamesRoot(decodeURIComponent(envNamesMatch[1])) : null;
+            }
+            catch {
+                root = null;
+            }
+            if (!root) {
+                sendJson(res, 404, { error: 'not-registered' });
+                return;
+            }
+            const result = (0, envNames_1.readEnvNames)(root);
+            if (!result.ok) {
+                sendJson(res, result.reason === 'too-large' ? 413 : 422, { error: result.reason });
+                return;
+            }
+            sendJson(res, 200, { names: result.names });
+            return;
+        }
         // lws — GET /local-file/:workspaceId?path=…&token=… — same origin+token
         // gate as /local-tree (a GET can't carry the session-token header).
         // cve-02 — POST /local-file/:workspaceId (write) lives on the same path:
@@ -397,6 +434,8 @@ function startBridgeServer(opts) {
                     'terminal-attach',
                     // Paste a key → .env — this bridge answers `save-env` frames.
                     'save-env',
+                    // tp-02 — GET /local-env-names answers (the Keys list, names only).
+                    ...(opts.resolveEnvNamesRoot ? [envNames_1.ENV_NAMES_CAPABILITY] : []),
                     // Screenshot drop — answers `attach-screenshot` (macOS only).
                     ...((opts.screenshotDeps ?? screenshotAttach_1.realScreenshotDeps).platform === 'darwin' ? ['attach-screenshot'] : []),
                 ],

package/dist/bridge/sessionAnchor.d.ts

@@ -22,6 +22,15 @@ export type SweepAnchorsResult = {
     ok: false;
     error: string;
 };
+/** The fixed author/committer of every anchor commit — see createSessionAnchor. */
+export declare const ANCHOR_IDENTITY: {
+    env: {
+        GIT_AUTHOR_NAME: string;
+        GIT_AUTHOR_EMAIL: string;
+        GIT_COMMITTER_NAME: string;
+        GIT_COMMITTER_EMAIL: string;
+    };
+};
 /** Every session anchor ref lives under this namespace — sweepStaleAnchors's glob and this function must agree. */
 export declare function anchorRefName(sessionId: string): string;
 /**

package/dist/bridge/sessionAnchor.js

@@ -33,6 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.ANCHOR_IDENTITY = void 0;
 exports.anchorRefName = anchorRefName;
 exports.createSessionAnchor = createSessionAnchor;
 exports.releaseSessionAnchor = releaseSessionAnchor;
@@ -80,6 +81,15 @@ exports.sweepStaleAnchors = sweepStaleAnchors;
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const crypto_1 = require("crypto");
+/** The fixed author/committer of every anchor commit — see createSessionAnchor. */
+exports.ANCHOR_IDENTITY = {
+    env: {
+        GIT_AUTHOR_NAME: 'HiveOp',
+        GIT_AUTHOR_EMAIL: 'session-anchor@hiveop.local',
+        GIT_COMMITTER_NAME: 'HiveOp',
+        GIT_COMMITTER_EMAIL: 'session-anchor@hiveop.local',
+    },
+};
 /** Every session anchor ref lives under this namespace — sweepStaleAnchors's glob and this function must agree. */
 function anchorRefName(sessionId) {
     return `refs/wenrwa/session-${sessionId}`;
@@ -114,7 +124,12 @@ async function createSessionAnchor(cwd, sessionId, deps) {
         const tree = treeRes.stdout.trim();
         // commit-tree never reads an index — no env override, and deliberately
         // no `-p <parent>`: this commit is a floating snapshot, not history.
-        const commitRes = await deps.run('git', ['-C', cwd, 'commit-tree', tree, '-m', 'wenrwa session anchor']);
+        // The identity is set HERE, never inherited: a hosted box has no git
+        // identity at all (the agent's rides only in its PTY env), and without
+        // one commit-tree dies "Author identity unknown" — which is why no hosted
+        // session report had ever been produced (prod 2026-10-19). The anchor is
+        // a hidden ref nobody pushes, so a fixed identity costs nothing.
+        const commitRes = await deps.run('git', ['-C', cwd, 'commit-tree', tree, '-m', 'wenrwa session anchor'], exports.ANCHOR_IDENTITY);
         if (commitRes.code !== 0) {
             return { ok: false, error: `anchor-commit-failed: ${commitRes.stdout.trim() || 'git commit-tree failed'}` };
         }

package/dist/commands/bridge.js

@@ -119,6 +119,11 @@ const claudeTrust_1 = require("../bridge/claudeTrust");
 // servers and the organization-wide Fly private network. See
 // companionForwarder.ts's module doc comment for the full design.
 const companionForwarder_1 = require("../bridge/companionForwarder");
+// tp-06 (docs/prd/team-preview.md module 4, ADR-0014) — the Team preview
+// forwarder: gateway address in, one preview port out. Hosted lane only.
+const previewForwarder_1 = require("../bridge/previewForwarder");
+// tp-05 — the Team preview checkout runner (hosted lane only, ADR-0014).
+const previewCheckout_1 = require("../bridge/previewCheckout");
 /** lws-12 — real fs binding for writeGitignore.ts: mirrors realLocalContextWriterDeps
  *  above, but a `.gitignore` may already hold user content, so this is a plain
  *  read + overwrite (append), never atomic-rename — there's no concurrent
@@ -635,6 +640,21 @@ exports.bridgeCommand = new commander_1.Command('bridge')
             // does not).
             rm: rmCheckoutDir,
         });
+        // tp-06 (ADR-0014) — the Team preview forwarder. Started here, in the
+        // container branch only: the local bridge never opens it. It is also a
+        // no-op without a `fly-local-6pn` entry, and stays off until
+        // HT_PREVIEW_GATEWAY names the gateway. start() never rejects.
+        void (0, previewForwarder_1.buildPreviewForwarder)({ readHosts: () => fs.readFileSync('/etc/hosts', 'utf-8') }).start();
+        // tp-05 (ADR-0014) — the Team preview checkout: main, in its own clones
+        // under /data/previews/<workspaceId>, with the owner's working-copy
+        // .env, served on 127.0.0.1:<preview port> (the port the forwarder
+        // above targets). Container branch only; the local bridge's relay
+        // client answers every preview frame `unsupported / local_lane`.
+        const previewRunner = new previewCheckout_1.PreviewRunner({
+            previewsBaseDir: process.env.WENRWA_PREVIEWS_DIR || path.join(path.dirname(reposBaseDir), 'previews'),
+            workingCopyDir: (workspaceId) => path.join(reposBaseDir, workspaceId),
+            port: (0, previewForwarder_1.resolvePreviewPorts)(process.env).previewPort,
+        });
         // cvt-07: the box's one shared Chromium, created lazily by the first tab.
         let browserHost;
         (0, relayClient_1.startRelayClient)({
@@ -781,6 +801,8 @@ exports.bridgeCommand = new commander_1.Command('bridge')
             // never created. Deliberately the identical closure, not a second
             // wiring: see its doc comment above.
             ensureCheckout: ensureWorkspaceCheckout,
+            // tp-05 — preview-start/stop/update/logs (previewFrames.ts).
+            preview: previewRunner,
             // pucc-int-04 (ADR-0032): install a forged crew `.claude` bundle into the
             // workspace checkout under the same /data/repos/<workspaceId> root. Pure
             // file writes (path-safe + idempotent) — Claude Code orchestrates the
@@ -909,6 +931,10 @@ exports.bridgeCommand = new commander_1.Command('bridge')
             // straight to the SAME pure claudeTranscriptReader.ts that derives
             // the path exactly as autolaunch.sh names it (psp-01: agentId ==
             // the .jsonl filename).
+            // tp-02 (docs/prd/team-preview.md story 39): the Keys list — the
+            // NAMES in /data/repos/<workspaceId>/.env, never a value
+            // (envNames.ts). Same root derivation + unsafe-id refusal as readFile.
+            resolveEnvNamesRoot: (workspaceId) => (0, bundleInstaller_1.isSafeWorkspaceId)(workspaceId) ? path.posix.resolve(reposBaseDir, workspaceId) : null,
             readTranscript: ({ workspaceId, agentId, engine, opencodeSessionId }) => (0, claudeTranscriptReader_1.readAgentTranscript)(reposBaseDir, workspaceId, agentId, {
                 engine,
                 opencodeSessionId,
@@ -990,6 +1016,8 @@ exports.bridgeCommand = new commander_1.Command('bridge')
         return;
     }
     // ---- local mode (byte-identical to pre-ht-05 behavior) ----
+    // tp-06: no Team preview forwarder here, by design (ADR-0014 scopes the
+    // local lane out; a laptop must not be opened to outside traffic).
     // 1. Connect Token: flag on first run, config thereafter.
     if (opts.token) {
         if (!opts.token.startsWith('wm_ct_')) {
@@ -1206,6 +1234,9 @@ exports.bridgeCommand = new commander_1.Command('bridge')
             const entry = (0, folderRegistry_1.findEntryByWorkspaceId)((0, folderRegistry_1.loadFolderRegistry)(), workspaceId);
             return entry?.path ?? null;
         },
+        // tp-02 — GET /local-env-names/:workspaceId: the registered folder's
+        // `.env` NAMES for the Keys list (values never leave envNames.ts).
+        resolveEnvNamesRoot: (workspaceId) => (0, folderRegistry_1.findEntryByWorkspaceId)((0, folderRegistry_1.loadFolderRegistry)(), workspaceId)?.path ?? null,
         // lws-08 (PRD D9) — a context-manifest frame writes ONLY
         // `.hiveop/context.md` under the resolved local workspace's project
         // root; unknown workspaceId → null (server.ts errors the frame).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wenrwa/marketplace-cli",
-  "version": "0.8.7",
+  "version": "0.8.9",
   "description": "CLI tool for the Wenrwa Agent Marketplace — monitor bounties, agents, workspaces, and treasury from your terminal",
   "author": "Wenrwa <dev@wenrwa.com>",
   "license": "MIT",